Check DNS propagation for a domain
Read-only
What do risk levels mean?
- Read-only
- Inspects state without changing anything.
- Low risk
- Reversible with a routine follow-up command.
- Medium risk
- Changes state; undo path documented.
- Destructive
- Deletes or overwrites; confirmation required.
Queries several public resolvers directly for the same record, so you can see whether a recent DNS change has propagated or is still cached.
networkdnspropagationdomain
Parameters
Domain name whose record was recently changed.
DNS record type to compare across resolvers.
Commands
Ask Cloudflare's public resolver for the record
dig +short <domain> A @1.1.1.1Ask Google's public resolver for the record
dig +short <domain> A @8.8.8.8Ask the locally configured resolver for comparison
dig +short <domain> AVerification
nslookup -type=A <domain> 8.8.8.8All resolvers return the new value once propagation is complete; differing answers mean caches are still expiring.
Undo
Not undoable
This recipe only queries DNS and changes nothing.
Pitfalls
- Resolvers cache answers for the record's TTL, so full propagation can take as long as the TTL that was in place before the change.
- Your local resolver may lag public ones; flush the local DNS cache before concluding the change has not propagated.